PT-2022-28271 · Phpxmlrpc · Phpxmlrpc

Published 2022-12-02 · Updated 2022-12-02

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions phpxmlrpc (affected versions not specified)

Description The issue concerns argument injection via local file access in the Client:send function. This is achieved through manipulation of the $protocol argument.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Argument Injection

Weakness Enumeration

CWE-88

Related Identifiers

GHSA-Q7QQ-9GX2-GGXV

Affected Products

Phpxmlrpc

References · 5

• https://osv.dev/vulnerability/GHSA-q7qq-9gx2-ggxv · Vendor Advisory
• https://github.com/FriendsOfPHP/security-advisories/blob/master/phpxmlrpc/phpxmlrpc/2022-11-28-1.yaml · Note
• https://github.com/gggeek/phpxmlrpc/issues/81 · Note
• https://github.com/gggeek/phpxmlrpc/releases/tag/4.9.0 · Note
• https://github.com/gggeek/phpxmlrpc · Note